How to report phishing to Amazon
If you received a suspicious email, text, phone call, or website pretending to be Amazon, knowing how to report phishing to Amazon can help protect your account and other customers.
This guide explains how to spot common Amazon phishing tactics, where to send reports, and what to do immediately if you clicked a bad link.
Phishing attacks often imitate Amazon branding, order notifications, password resets, delivery updates, or gift card alerts, which makes them easy to miss.
The faster you identify and report them, the better your chances of avoiding account compromise, unauthorized purchases, or identity theft.
What counts as Amazon phishing?
Phishing is a social engineering attack designed to trick you into revealing credentials, payment details, or personal information.
In the Amazon ecosystem, attackers commonly impersonate Amazon Customer Service, Amazon Prime, Amazon Pay, or Amazon Logistics.
- Email phishing: Messages that look like order confirmations, refund notices, login alerts, or subscription warnings.
- SMS phishing (smishing): Texts about failed deliveries, suspicious logins, or account verification.
- Voice phishing (vishing): Calls claiming to be Amazon support and asking for one-time passwords or remote access.
- Fake websites: Pages that copy Amazon branding and ask you to sign in or enter card details.
Common red flags include urgent language, unexpected attachments, misspelled domains, mismatched sender addresses, and requests for passwords, gift cards, or payment outside the official Amazon checkout process.
How to report phishing to Amazon?
Amazon provides dedicated reporting paths for suspicious messages and fake websites.
The most important rule is to avoid replying to the scammer or clicking additional links before you report it.
Report suspicious email to Amazon
Forward the suspicious message to Amazon’s abuse team at [email protected].
This address is used for reporting spoofed or phishing emails that appear to come from Amazon.
- Forward the original email as an attachment if your email service supports it.
- Keep the full headers if possible, since they help identify the source.
- Do not alter the message content before forwarding it.
If the phishing email included a suspicious link, do not visit it again.
The goal is to preserve the evidence while minimizing risk.
Report suspicious websites or URLs
If you found a fake Amazon login page or order page, report the URL directly to Amazon through its official reporting channels.
In many cases, you can also submit the malicious link to your browser provider or security vendor for blocking.
- Copy the full web address without opening it again.
- Report it through Amazon’s phishing report email or customer support channels.
- Use your browser’s built-in phishing reporting feature if available.
Report suspicious text messages
If a scam arrived by SMS, do not tap the link.
Capture a screenshot and report it to your mobile carrier or messaging app, then notify Amazon through official support resources if the message references Amazon orders or accounts.
Report suspicious phone calls
If someone calls claiming to be Amazon and asks for login codes, gift card numbers, or remote access, hang up and contact Amazon through the official website or app.
Amazon support will not ask for your password or one-time verification code over the phone.
How to verify whether a message really came from Amazon
Before you report a message, it helps to verify whether it is genuine.
Amazon recommends checking your account directly instead of trusting links inside the message.
- Open the Amazon app or type Amazon’s official website address into your browser manually.
- Check Your Orders for any real purchases or delivery updates.
- Review Message Center or account notifications inside your Amazon account.
- Inspect the sender domain carefully; look for misspellings or extra words.
Legitimate Amazon notifications typically direct you to sign in through Amazon’s official domain, not a shortened link or unfamiliar website.
If the message urges immediate action and bypasses normal account channels, treat it as suspicious.
What to do if you clicked a phishing link?
Clicking a malicious link does not always mean your account is compromised, but you should act quickly.
The first steps depend on whether you entered any information or downloaded anything.
- Close the page immediately.
- Do not enter your Amazon password, card number, or one-time code.
- Run a full antivirus or anti-malware scan on your device.
- Change your Amazon password if you typed it into the fake site.
- Check for unauthorized orders, saved payment changes, or address changes.
If you used the same password on other sites, update those accounts too.
Credential stuffing attacks often reuse stolen passwords across email, banking, and shopping accounts.
How to protect your Amazon account after a phishing attempt
Once you have reported the phishing attempt, strengthen your account so a future scam is less likely to succeed.
Amazon account security depends heavily on password hygiene and verification controls.
- Enable two-step verification: This adds a second check when signing in.
- Use a unique password: Never reuse passwords from email, banking, or social accounts.
- Review login activity: Look for unfamiliar devices or sign-in attempts.
- Check payment methods: Remove cards you no longer use.
- Review saved addresses: Watch for shipping changes made by attackers.
If you are an Amazon Prime member, business user, or frequent marketplace buyer, monitoring account activity regularly can help detect fraud before it becomes costly.
Where else should you report Amazon phishing?
Amazon is the first reporting stop for brand impersonation, but external reporting can help limit the scam’s spread.
Depending on the attack, you may also want to notify other organizations.
- Your email provider: Report spoofed emails as phishing so filters improve.
- Your mobile carrier: Forward scam texts to the carrier’s spam reporting number or app.
- Browser security tools: Report fake sites to help block them faster.
- Local authorities: If money was stolen or identity data was exposed, file a fraud report.
If the scam used a stolen Amazon logo, trademark, or copied page design, external reports can help reduce future abuse by getting the domain or message blocked more quickly.
What information should you include in a phishing report?
A strong report helps investigators identify the source and pattern of the attack.
Include only the relevant evidence and avoid sending sensitive personal information unless requested by an official support channel.
- Full sender email address or phone number
- Subject line or message preview
- Suspicious URL or website domain
- Screenshots of the message or website
- Time and date received
- Any actions you already took, such as changing your password
Keep your report factual.
Describing exactly what happened makes it easier for Amazon and other providers to respond quickly.
How to report phishing to Amazon if you manage multiple users?
If you oversee a family account, business purchasing profile, or shared device, phishing awareness matters even more.
One compromised user can expose stored cards, delivery addresses, and order history across the account.
- Tell all users to avoid clicking links in email or text.
- Require two-step verification for every sign-in that supports it.
- Use separate passwords for business and personal accounts.
- Review permissions for household members or employees regularly.
- Train users to verify orders inside the Amazon app before responding to alerts.
Shared accounts often become targets because attackers assume at least one person will react quickly to a fake delivery notice or refund request.
How to report phishing to Amazon quickly and safely
When you need to report a scam, move from verification to action in a few clear steps: stop interacting with the message, preserve the evidence, forward it to Amazon’s phishing address, and secure your account if you clicked anything.
Reporting early helps Amazon block impersonation attempts and helps you reduce the chance of fraud spreading to your other accounts.